[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-7-8":3},{"item":4,"lessons":16,"controls":18,"related":19},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-7-8","Annex A 7.8","Equipment siting and protection",0,"International Organization for Standardization (ISO) and IEC","**What it asks for.** Place equipment securely and protect it.\n\n**In practice.** Equipment is positioned to reduce risks from physical and environmental threats and unauthorised access, for example keeping servers in controlled rooms, away from water pipes and heat sources. Screens showing sensitive information are angled away from windows and public areas. Environmental conditions such as temperature and humidity are monitored where they could harm equipment, and lightning or power surge protection is fitted where appropriate. Auditors check equipment locations against risk, environmental monitoring records and the protection fitted to critical items.\n\n**Common gaps.** Network and storage equipment often ends up in cupboards, ceilings or shared utility rooms without monitoring. Equipment in branch offices, retail sites and remote locations tends to receive far less attention than equipment at headquarters.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[],[],[]]